why are pf-blocked ips 'leaking' thru to spamd?

[snowcrash]

i suppose alternative would be to,

  --- set require-order yes
  +++ set require-order no

and put some

  block quick <ip-black>

BEFORE those rdr's  ... to prevent those addresses in <ip-black> from
ever seeing the redirection in the first place (which is probably
better anyway).

BUT, i've heard tell that disabling require-order can have its own set
of 'surprises' ...